Yes, setting permission rules are mandatory. You don't need to add all permissions to all users as you did, you can configure that, but nice catch! I'll make sure we add this step to the firebase demo module when we implement it.